Most companies don't decide between an in-house quality team and an outside consultant on purpose. They drift into one. A founder handles quality until the first big customer audit, a plant hires a quality manager after a bad complaint, or a consultant gets called in a month before a certification body shows up. Then, a year later, someone asks whether the setup still makes sense.
I think the question is framed wrong most of the time. It's rarely "which one is better." It's "which kind of work is this?" Some quality work is continuous and needs to live inside your walls. Some is episodic and specialized, and paying a full-time salary for it is like heating a house all year for one cold week. This article walks through how I sort the two, what the standards and regulations say about it, and how to blend them without paying twice.
What Is the Real Difference Between an In-House Quality Team and a Consultant?
An in-house team owns the quality system day to day: complaints, nonconformances, supplier follow-up, internal audits, training records, and the thousand small decisions that never make it into a meeting. A consultant brings specialized knowledge, outside perspective, and capacity for a defined stretch of time, then leaves.
The difference that matters most is accountability versus transfer. Your employees are accountable for the system when the consultant is gone. A good consultant is accountable for getting you to a working system and for making sure your people can run it. If the engagement ends and nobody internal can explain why a procedure exists, the consultant did a poor job, however clean the binder looks.
ISO 9001:2015 makes this point in its own language. Clause 5.1 puts leadership and commitment on top management, and clause 5.3 requires top management to assign responsibility and authority for the quality management system. Nothing in the standard lets you hand that responsibility to a third party. A consultant can draft, coach, and audit, but a named person inside the organization has to own the system.
When Does an In-House Quality Team Make Sense?
An internal team is the right answer when the work is continuous, tied to daily production or service, and dependent on knowing your product and people. Several situations point that way.
You run regulated, high-frequency operations. A drug manufacturer has a quality control unit with responsibilities spelled out in 21 CFR 211.22, including the authority to approve or reject components, in-process materials, and finished product. A food facility needs a preventive controls qualified individual under 21 CFR 117.180 to prepare the food safety plan and oversee its application. A medical device manufacturer under the FDA's Quality Management System Regulation (21 CFR Part 820, which took effect February 2, 2026 and incorporates ISO 13485:2016) needs people who release product, handle complaints, and manage corrections every week. These are not tasks you can outsource to someone who visits quarterly.
Your product or process changes constantly. If engineering changes weekly, a person who sits in those meetings catches a change-control problem before it becomes a finding. A consultant seeing your system twice a year will find it afterward.
Institutional knowledge is the asset. ISO 9001:2015 clause 7.1.6 asks you to determine and maintain the knowledge your processes need. That knowledge walks out the door when it lives with a contractor, and rebuilding it costs more than most people expect.
The volume of work justifies headcount. If you have enough daily quality tasks to keep one or more people busy, hiring is almost always cheaper and better than renting the same hours at consulting rates.
When Does an External Consultant Make Sense?
A consultant earns the fee when the work is specialized, has a clear start and end, or needs someone with no stake in how things have always been done.
First-time certification or a new framework. Building an ISO 9001, ISO 13485, ISO 14001, ISO 45001, ISO 27001, or ISO 42001 system from zero is a project, not a job. Your people may have never seen a management review input list or a clause 6.1 risk and opportunity register. Someone who has walked through the process many times shortens the learning curve, and the project ends when certification is granted. If that is where you are, a certification-focused ISO consultant can scope the work without you adding permanent headcount.
A gap you can't fill from inside. Maybe you're entering the EU medical device market, adding a GFSI scheme such as SQF, BRCGS, or FSSC 22000, or putting an AI management system in place. Hiring a full-time specialist for a requirement you'll meet once rarely pencils out.
Independent internal audits. ISO 9001:2015 clause 9.2.2 requires that audit processes ensure objectivity and impartiality of the auditor. ISO 13485:2016 clause 8.2.4 carries a similar requirement, and auditors may not audit their own work. In a ten-person company where the same two people write and run every process, an outside auditor is often the only way to meet that expectation honestly.
A surge. A warning letter response, a major customer corrective action request, a failed audit, an acquisition, or a new site all create a spike. Consultants flex up and down. Employees don't.
A fresh set of eyes. I've seen quality systems that are fully compliant on paper and quietly broken in practice because nobody inside remembers why they do things the way they do. An outsider asks "why do you do it that way?" and sometimes there's no good answer.
Side-by-Side Comparison
| Factor | In-House Quality Team | External Consultant |
|---|---|---|
| Best for | Continuous, daily quality operations | Projects, gaps, audits, surges |
| Cost structure | Salary, benefits, training, turnover risk | Fees for defined scope or retainer |
| Product and process knowledge | Deep and cumulative | Starts shallow, grows with engagement |
| Objectivity | Limited by reporting lines and familiarity | High, no internal politics |
| Specialized expertise | Limited to who you hired | Broad, can be matched to the scheme |
| Availability | Always on site | Scheduled or on-call |
| Accountability for the system | Permanent (clause 5.3 role assignment) | Ends with the engagement |
| Speed to start | Slow (recruiting, onboarding) | Fast |
| Risk | Single point of failure if one person leaves | Dependency if knowledge isn't transferred |
| Typical use case | Release decisions, complaints, CAPA, supplier control | Gap assessment, certification build, mock audit |
How Do the Costs Really Compare?
Hourly rates are the wrong comparison. A consultant's rate looks high next to a salary divided by 2,080 hours, but the salary comparison leaves out benefits, training, management time, software, and the months a new hire takes to become useful. It also leaves out idle time. A quality manager hired to support a certification project who then has 20 hours of real work a week is an expensive way to keep a chair warm.
A more useful question is utilization. If you can keep a person fully and productively busy on quality work year-round, hire. If the work comes in bursts, or if it needs a skill set you'll use for six months, buy it by the project.
The reverse mistake is just as common. I see companies paying a consultant for years to do work that is plainly operational, like reviewing every complaint or maintaining the document control system. That's a salary you're paying at a premium, and it also means nobody inside truly owns the system.
What Does Company Size and Stage Change?
Where you are in your life cycle changes the answer more than industry does.
Startups and very small companies (under about 20 people). There usually isn't enough quality work for a full-time hire, and the founder is stretched. A fractional or retained consultant often works well here, with one internal person designated as the quality owner, even part-time. Clause 5.3 still needs a name.
Growth-stage companies (roughly 20 to 150 people). This is the awkward middle where most systems break. Volume is rising, customers are asking for certification, and the informal system no longer holds. I'd generally recommend a first quality hire, often a quality manager with solid generalist skills, supported by a consultant for the certification build and independent audits.
Established mid-size and large organizations. You most likely have a team, so the consultant's role narrows to specialist work: a new standard, an unfamiliar regulator, a mock audit, a remediation, or an audit program that needs independence from the plant.
Can You Use Both? The Hybrid Model
Most of the strongest quality programs I see use both, with clear boundaries. The in-house team owns operations, and the consultant owns specific deliverables with dates and handoffs.
A few arrangements that work well:
- Build and handoff. A consultant designs and implements the system alongside an internal quality lead, who then runs it. The consultant stays on a light retainer for questions and the first surveillance cycle.
- Independent audit layer. Your team runs the system and an outside auditor performs some or all internal audits to satisfy the objectivity expectation in clause 9.2.2 and to give leadership a candid read for management review under clause 9.3.
- Specialist on call. You keep a generalist on staff and bring in a regulatory, food safety, medical device, or AI governance specialist when a specific question arises.
- Interim coverage. A consultant fills a quality manager vacancy while you recruit, so the system doesn't stall and a hasty hire doesn't happen.
One structural point trips people up. Certification bodies accredited to ISO/IEC 17021-1:2015 can't consult for the clients they certify (see clause 5.2.5 on conflicts of interest), so the person who helps you build the system will never be the person who certifies it. That's by design. It also means you should treat your consultant and your registrar as separate relationships with separate jobs.
How Do You Decide? A Practical Framework
When someone asks me whether to hire or engage a consultant, I run through five questions.
- Is the work continuous or episodic? Daily release decisions, complaints, and supplier follow-up point to hiring. A certification build or gap assessment points to a consultant.
- Does it require independence? If the answer is yes, an internal person reviewing their own work won't satisfy the objectivity expectation. Bring in an outsider.
- Is the skill rare and temporary? Rare and one-time means rent. Common and ongoing means own.
- Who will be accountable when the work is done? If you can't name that person, fix that first, whichever route you choose.
- What's the cost of being wrong? For regulated products, a missed release decision or a late complaint report has consequences that dwarf the consulting fee. Put your best resources there, whether internal or external.
If you answer mostly "continuous, accountable, and needing product knowledge," build the team. If you answer mostly "episodic, specialized, or needing independence," bring in help. If it's mixed, which it usually is, go hybrid.
Common Mistakes to Avoid
Hiring a quality manager to get certified. A person hired just to pass an audit often leaves after the certificate arrives, and the system leaves with them. Hire for running the system and use a consultant for the build.
Letting the consultant write everything. Procedures that your people didn't help write are procedures they won't follow. Auditors can tell within a few interviews when staff can't explain their own processes, and ISO 9001:2015 clause 7.2 on competence applies to the people doing the work, not to the author of the document.
Skipping knowledge transfer. Put it in the contract. Define what your team should be able to do on their own by the end, and test it with a mock audit run by your staff.
Using the same person to build and audit. The person who designed the system is the worst candidate to audit it. Separate those roles even if it means a second outside voice.
Treating the choice as permanent. The right setup at 30 employees is rarely right at 300. Revisit it annually, perhaps at management review.
Final Thoughts
If I had to put it plainly, I'd say an in-house team is how you keep a quality system alive, and a consultant is how you get it built, stretched, or checked. Companies run into trouble when they ask one to do the other's job.
If you're weighing this for your own organization, I'm happy to talk through it. You can reach us through the Certify Consulting contact page, and I'll tell you honestly whether you need me or whether you need to hire.
Last updated: 2026-10-21
Frequently Asked Questions
Should a small company hire a quality manager or use a consultant?
Companies under about 20 people usually don't have enough daily quality work for a full-time hire, so a consultant plus a designated internal quality owner often works better. ISO 9001:2015 clause 5.3 still requires top management to assign quality responsibilities to named people inside the organization.
Can a consultant perform my ISO 9001 internal audits?
Yes. ISO 9001:2015 clause 9.2.2 requires objectivity and impartiality of auditors, and an outside auditor is a common way to meet that in small companies where the same people write and run the processes. Your internal team should still own the audit program and the follow-up on findings.
Can my certification body also consult for my company?
No. ISO/IEC 17021-1:2015 clause 5.2.5 prohibits certification bodies from offering consultancy to clients they certify, so consulting and certification must come from separate organizations.
When is an external consultant more cost-effective than hiring?
A consultant is usually more cost-effective for work that is episodic, specialized, or needs independence, such as a first-time ISO certification, a gap assessment, a mock audit, or a corrective action surge. For continuous daily tasks like complaint handling and release decisions, an employee is typically cheaper.
What is a hybrid quality model?
A hybrid model keeps day-to-day quality operations with internal staff and uses a consultant for defined deliverables such as the initial system build, independent internal audits, or specialist regulatory questions. It works best when the contract includes knowledge transfer and a clear handoff date.
Jared Clark
Principal Consultant, Certify Consulting
Jared Clark is the founder of Certify Consulting, helping organizations achieve and maintain compliance with international standards and regulatory requirements.